| IP | Port | Type | Family | APT | Hostname | Country | AS | First seen | Last online |
|---|---|---|---|---|---|---|---|---|---|
| 113.45.6.129 | 4443 | C2 | VShell | — | — | CN | AS55990 | 2026-09-19 | — |
| 106.52.255.211 | 13321 | C2 | Unknown | — | — | CN | AS45090 | 2026-09-19 | — |
| 110.173.53.99 | 8080 | C2 | VShell | — | — | HK | AS45753 | 2026-09-18 | — |
| 111.229.216.164 | 6379 | C2 | VShell | — | — | CN | AS45090 | 2026-09-18 | — |
| 45.192.213.11 | 80 | C2 | VShell | — | — | SC | AS138995 | 2026-09-18 | — |
| 8.137.35.137 | 18084 | C2 | VShell | — | — | SG | AS37963 | 2026-09-18 | — |
| 187.124.49.109 | 2222 | C2 | Unknown | — | — | LT | AS47583 | 2026-09-18 | — |
| 187.124.49.109 | 8080 | C2 | Unknown | — | — | LT | AS47583 | 2026-09-18 | — |
| 187.124.49.109 | 80 | C2 | Unknown | — | — | LT | AS47583 | 2026-09-18 | — |
| 187.124.49.109 | 443 | C2 | Unknown | — | — | LT | AS47583 | 2026-09-18 | — |
| 154.91.61.110 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.61.104 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 187.124.49.109 | 631 | C2 | Unknown | — | — | LT | AS47583 | 2026-09-18 | — |
| 154.91.61.122 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.61.113 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 94.154.43.211 | 80 | C2 | Mirai | — | — | UA | AS219502 | 2026-09-18 | 2026-09-25 |
| 92.118.126.165 | 443 | C2 | PureRAT | — | — | RU | AS62005 | 2026-09-18 | 2026-09-25 |
| 91.219.239.100 | 56003 | C2 | PureRAT | — | — | HU | AS56322 | 2026-09-18 | 2026-09-25 |
| 80.190.77.86 | 1003 | C2 | AsyncRAT | — | — | DE | AS40021 | 2026-09-18 | 2026-09-25 |
| 64.89.161.92 | 56003 | C2 | PureRAT | — | — | US | AS36680 | 2026-09-18 | 2026-09-25 |
| 62.233.51.136 | 7222 | C2 | PureRAT | — | — | LT | AS213186 | 2026-09-18 | 2026-09-25 |
| 45.88.186.207 | 443 | C2 | PureRAT | — | — | — | — | 2026-09-18 | 2026-09-25 |
| 45.192.211.126 | 56002 | C2 | PureRAT | — | — | SC | AS138995 | 2026-09-18 | 2026-09-25 |
| 45.192.211.126 | 56001 | C2 | PureRAT | — | — | SC | AS138995 | 2026-09-18 | 2026-09-25 |
| 45.139.104.29 | 443 | C2 | PureRAT | — | — | US | AS399979 | 2026-09-18 | 2026-09-25 |
| 45.139.104.26 | 55010 | C2 | PureRAT | — | — | US | AS399979 | 2026-09-18 | 2026-09-25 |
| 23.94.197.13 | 8848 | C2 | DCRat | — | — | US | AS36352 | 2026-09-18 | 2026-09-25 |
| 209.74.86.250 | 8443 | C2 | Evilginx | — | — | US | AS22612 | 2026-09-18 | 2026-09-25 |
| 193.26.115.5 | 443 | C2 | PureRAT | — | — | — | — | 2026-09-18 | 2026-09-25 |
| 193.25.215.83 | 56001 | C2 | PureRAT | — | — | US | AS397966 | 2026-09-18 | 2026-09-25 |
| 185.212.128.32 | 9000 | C2 | Evilginx | — | — | VG | AS57043 | 2026-09-18 | 2026-09-25 |
| 176.65.132.207 | 80 | C2 | Mirai | — | — | DE | AS197170 | 2026-09-18 | 2026-09-25 |
| 172.86.85.185 | 7443 | C2 | Unknown | — | — | US | AS14956 | 2026-09-18 | 2026-09-25 |
| 167.99.174.8 | 65000 | C2 | Unknown | — | — | US | AS14061 | 2026-09-18 | 2026-09-25 |
| 157.230.7.115 | 8443 | C2 | Evilginx | — | — | US | AS14061 | 2026-09-18 | 2026-09-25 |
| 149.88.76.74 | 56003 | C2 | PureRAT | — | — | US | AS401696 | 2026-09-18 | 2026-09-25 |
| 147.124.214.219 | 56003 | C2 | PureRAT | — | — | US | AS396073 | 2026-09-18 | 2026-09-25 |
| 13.193.175.186 | 80 | C2 | Brute Ratel C4 | — | — | US | AS16509 | 2026-09-18 | 2026-09-25 |
| 154.91.60.122 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.60.117 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.60.115 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.60.111 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 154.91.60.109 | 8084 | C2 | VShell | — | — | SC | AS400619 | 2026-09-18 | — |
| 195.177.94.91 | 6000 | C2 | XWorm | — | — | UA | AS214961 | 2026-09-18 | — |
| 31.6.50.206 | 2002 | C2 | XWorm | — | — | US | AS213200 | 2026-09-18 | — |
| 143.92.51.33 | 443 | C2 | XWorm | — | — | SG | AS152194 | 2026-09-18 | — |
| 82.47.101.153 | 3388 | C2 | XWorm | — | — | GB | AS197194 | 2026-09-18 | — |
| 45.141.27.97 | 7000 | C2 | XWorm | — | — | NL | AS142299 | 2026-09-18 | — |
| 155.103.71.126 | 4143 | C2 | Remcos | — | — | US | AS44382 | 2026-09-18 | — |
| 82.29.92.60 | 35121 | C2 | Remcos | — | — | GB | AS212238 | 2026-09-18 | 2026-09-24 |